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Claims 

1. A conditional access system wherein digitised multimedia data are 
transmitted in a continuous transport stream of successive datd packets, 
characterised in that a selectively encrypted transport stream is formed from a 
base transport stream by detecting particular data packets within the bas< : transport 
stream, removing and encrypting the particular data packets with an event 
encryption key, and inserting the encrypted data packets into the remaining base 



transport stream at insertion positions ahead in time with respect to die original 
10 positions of the particular data packets in the base transport stream. 1 



2. A conditional access system wherein digitised multimedia data are 
transmitted in a continuous transport stream of successive data packets, 
characterised in that a selectively encrypted transport stream is formed from a 
base transport stream by detecting particular data packets within the bas$ transport 

stream, removing and encrypting the particular data packets with jan event 

i 

encryption key, and inserting the encrypted data packets into the remaining base 
transport stream at insertion positions corresponding to the original positions of 
the particular data packets in the base transport stream, j 



3. The system of claim 1 or claim 2, wherein an event decryption key is 
provided to an authorised receiver provided with the conditional access system, 
the selectively encrypted transport stream is transmitted to the receiver, the 
conditional access system detects encrypted data packets, removes the encrypted 
data packets from the received transport stream, decrypts the encrybted data 
packets with the event decryption key, and inserts the decrypted data packets into 
the remaining received transport stream at positions corresponding to the 
respective original positions of the particular data packets within jthe base 
transport stream. 
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4. Hie system of claim 3, wherein the event decryption key is provided on a 
one-event smart card. 

5. The system of claim 3, wherein the event decryption key is provided on a 
one-limited-period smart card. 

S 6. The system of claim 3, wherein die event decryption key ill a DVB 
environment is transmitted in specific EMMs protected by a user encryption key, 

, the corresponding user decryption key being provided in the CAS, on a yser smart 
card or on a user SIM j 

i 

7. The system of claims 2 and 3, wherein the conditional access system has a 



10 buffer memory to store clear data packets while an encrypted data 
decrypted. 



packet is 



8. Hie system of claim 1 or claim 3, wherein said encrypted data packets are 
inserted at positions a predetermined number of data packets ahead of Respective 
original positions. 

15 9. The system of claim any of claims 3 to 8, wherein said conditional access 
system includes a chip card with decryption* circuitry thereon. 

10. The system of claim 9, wherein the chip card is a SIM card. 

11. The system of any of the preceding claims, wherein the decryption key is 
transmitted to a receiver with the selectively encrypted data stream. 

20 12. The system of claim 1 1, wherein the event decryption key is frequently 
changed 

13. The system of any of claims I to 1 1, wherein the event decryption key is a 
fixed key distributed on a pay-per-event basis. 

14. The system of claim 13, wherein the event decryption key is transmitted in 
25 a GSM network prior to an event and loaded into a SIM or smart card inserted in a 

SIM or smart card reader of a mobile phone. 
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1 5. The system of any of the preceding claims, wherein the event decryption 
key is provided encrypted with a user encryption key and a corresponding user 
decryption key is also provided to an authorized user. 

16. The system of any of the preceding claims, comprising a head-ec d encoder 
for producing the selectively encrypted data stream, the head-en< encoder 
including a Common Interface CI that in turn has a smart card SC into face for a 
smart card that has encryption circuitry thereon. 

17. The system of any of claims 1 to 15, comprising a head-end encoder for 
producing the selectively encrypted data stream, the head-end encoder ii icluding a 
Common Interface CI for a PC card module that has encryption circuitry! thereon. 

18. The system of any of claims 1 to 15, comprising a head-end encoder for 
producing the selectively encrypted data stream, the head-end encoder including a 
Personal Computer PC with an interface for a chip card containing 
encryption key or a user encryption key, the encryption being processed 



an event 

in the PC. 

i 



19. The system of any of claims 1 to 15, comprising a head-end encoder for 
producing the selectively encrypted data stream, the head-end encoder including 
an encoder CI module with a CI&TS (Common Interface and Transpoijt Stream) 
interface to a professional Set-Top-Box STB. 



20. The system of any of claims 1 to 19 wherein the base data stream is a clear 
20 data stream. 

21. The system of any of claims 1 to 19 wherein the base data stfeam is a 
DVB-scrambled data stream. 

22. Hie system of any of claims 1 to 19 wherein all data packets othet than the 
selectively encrypted data packets are DVB-scrambled. 

25 23. The system of claim 19, wherein the encoder CI module further comprises 
a high speed interface to a PC, a base transport stream being sent to the P Z via the 
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high speed interface to be selectively encrypted by the PC or by a PC (peripheral, 
said PC peripheral being one of the following 

• a smart card reader SCR for a smart card SC having encryption 
circuitry thereon; 

S - an encryption PCMCIA module having encryption circjuitry and 

forming a SCR for a head-end smart card* 

24. The system of any of the preceding claims, wherein said partitailar data 
packets are of a nature such that their contents are propagated to successive data 
packets. 

10 25. The system of any of claims 1 to 24, wherein said particular data packets 
are data packets containing sign bits of DCT coefficients in an MPEG stafeam. 

26. Hie system of any of claims 1 to 24, wherein every n* data packet of the 
transport stream is encrypted, n being a fixed number. 

27. The system of any of claims 1 to 24, wherein every n* data pad cet of die 
1 5 transport stream is encrypted, n being a variable number. 



20 



28. The system of claim 27, wherein the variable number n is 
variable. 



29. The system of claim 27, wherein die variable number n is variable as a 
function of data packet contents. 

30. The system of any of claims 3 to 29, wherein the conditional access system 
is embedded in a user Set-Top-Box (STB). 

31. The system of any of claims 3 to 29, wherein said condition^ access 
system includes a PC card with a Common Interface CI for connection to a user 
Set-Top-Box (STB). 
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32. The system of claim 30 or claim 3 1 , wherein said user Set-Top-E ox (STB) 
is capable of detecting a current encryption level of the transport stream and to 
direct the transport stream, in accordance with the detected encryption level, to 
decryption circuitry associated with that encryption level. 



5 33. The system of claim 30 or claim 31, wherein die user Set-Top-flox 
is capable of detecting at least some of the following encryption levels 
transport stream : 

- None 



10 



15 



20 



25 



- DVB only 

- DVB and selective encryption 

- Selective encryption only, 

and the Set-Top-Box (STB) is capable of directing the transport stream 
to at least one of the following decryption means: 

- None 

- An embedded conditional access system in the Set-Top-Bjut (STB) 
able to cope with DVB only, 

- An embedded conditional access system in the Set-Top-Box (STB) 
able to cope with selective encryption only, 

An embedded conditional access system in the Set-Top-B|>x (STB) 
able to cope with DVB and with selective encryption, 

- A conditional access module in the 1 st Common Interface (CI) slot 
of the Set-Top-Box (STB) able to cope with DVB only, 

- A conditional access module in the 1 st Common Interface (CI) slot 
of the Set-Top-Box (STB) able to cope with selective encryption 
only, 



(STB) 
of the 
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A conditional access module in the 1 * Common Interface (CI) slot 



of the Set-Top-Box (STB) able to cope with DVB 
selective encryption, 



and with 



- A conditional access module in the 2 nd Common Inter&<4 (CI) slot 
of the Set-Top-Box (STB) able to cope with DVB only, 

- A conditional access module in the 2 nd Common Interfax i (CI) slot 
of die Set-Top-Box (STB) able to cope with selective encryption 
only, 

- A conditional access module in die 2 nd Common Interfax (CI) slot 
of the Set-Top-Box (STB) able to cope with DVB and with 
selective encryption, 

- A Smart Card (SC) in a Smart Card Reader (SCR). 

34. A method of producing a partially scrambled or corrupted transport stream 
from a clear transport stream containing digitised multimedia data in successive 
data packets, characterised in that a selectively encrypted transport btream is 
formed from a dear transport stream by detecting particular data pack* its within 
the clear transport stream, removing and encrypting the particular dat i packets 
with an event encryption key, and inserting the encrypted data packet:; into the 
r em ai n i ng dear transport stream at insertion positions ahead in time wi h respect 
to the original positions of the particular data packets in the dear transpo: t stream. 



transpcrt 



packets 



35. A method of producing a partially scrambled or corrupted 
from. a clear transport stream containing digitised multimedia data in 
data packets, characterised in that a selectively encrypted transport 
formed from a dear transport stream by detecting particular data 
die dear transport stream, removing and encrypting die particular date 
with an event encryption key, and inserting the encrypted data packet* 
remaining dear transport stream at insertion positions corresponds g 
original positions of the particular data packets in the clear transport stream. 



stream 
successive 
ttrcam is 
within 
packets 
into the 
to the 
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36. A method of producing a scrambled transport stream from a dean transport 
stream containing digitised multimedia data in successive data 
characterised in that 



- selected data packets are determined within the clear 



transport 



die selected data packets are processed to obtain control vfords CW 
therefrom; 

data packets following each selected data packet fae DVB 
scrambled using control words CW obtained from the preceding 
selected data packet; and 

the selected data packets are encrypted with an event encryption 
key. 



37. The method of claim 36, wherein the encrypted selected data 
inserted in the scrambled transport stream at positions ahead in time 
IS to the original positions of the selected data packets in the 



pickets 



wih 



clear transport stream, 



are 
respect 
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